CVE-2025-40022
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/10/2025
Last modified:
27/10/2025
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
crypto: af_alg - Fix incorrect boolean values in af_alg_ctx<br />
<br />
Commit 1b34cbbf4f01 ("crypto: af_alg - Disallow concurrent writes in<br />
af_alg_sendmsg") changed some fields from bool to 1-bit bitfields of<br />
type u32.<br />
<br />
However, some assignments to these fields, specifically &#39;more&#39; and<br />
&#39;merge&#39;, assign values greater than 1. These relied on C&#39;s implicit<br />
conversion to bool, such that zero becomes false and nonzero becomes<br />
true.<br />
<br />
With a 1-bit bitfields of type u32 instead, mod 2 of the value is taken<br />
instead, resulting in 0 being assigned in some cases when 1 was intended.<br />
<br />
Fix this by restoring the bool type.
Impact
References to Advisories, Solutions, and Tools
- https://git.kernel.org/stable/c/316b090c2fee964c307a634fecc7df269664b158
- https://git.kernel.org/stable/c/3a21698ace915a445bce2d0dcfc84b6d2199baf7
- https://git.kernel.org/stable/c/54506c6335690f4ef1b9f154e34f5a604c72c1ed
- https://git.kernel.org/stable/c/8703940bd30b5ad94408d28d7192db2491cd3592
- https://git.kernel.org/stable/c/d0ca0df179c4b21e2a6c4a4fb637aa8fa14575cb
- https://git.kernel.org/stable/c/d382d6daf0184490f366562469a5673f65ee2662
- https://git.kernel.org/stable/c/fbe96bd25423e61273d8831e995260b429d850b6



